VULNERABILITY INTELLIGENCE
CVE-2026-84485
CVSS score7.5 HIGH
EPSS probability0.61%
CISA KEVNot currently listed
Published2026-09-02
Last modified2026-09-23
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
APITable through 1.13.0-beta.1 exposes the internal organization loadOrSearch endpoint without authentication, allowing unauthenticated attackers to retrieve member names, email addresses, and team hierarchy. Attackers can query the endpoint with space identifiers obtained from shared links or public templates to enumerate the complete member directory of any workspace.
Weakness classification
- disclosure@vulncheck.com: CWE-306